2.1.5 (Mr. Meeseeks)

2024-05-04

Added

• Support of PHP 8.2 and 8.3 in GitHub Actions.

Fixed

• Security issue with remember me key in auth. See: https://chmod744.super.site/redacted-vulnerability.

2.0.13 (Rick Sanchez)

2024-05-04

Added

• GitHub Actions pipeline (backport from v2.1) + support of PHP 8.2 and 8.3.

Fixed

• Security issue with remember me key in auth. See: https://chmod744.super.site/redacted-vulnerability.

2.1.4 (Mr. Meeseeks)

2024-01-11

Fixed

• Updated dependencies. Fixed:
  • guzzlehttp/psr7 (1.9.0) | CVE-2023-29197: Improper header validation | GHSA-wxmh-65f7-jcvw.

2.0.12 (Rick Sanchez)

2024-01-11

Fixed

• Updated dependencies. Fixed:
  • guzzlehttp/psr7 (1.9.0) | CVE-2023-29197: Improper header validation | GHSA-wxmh-65f7-jcvw.

2.1.3 (Mr. Meeseeks)

2023-01-11

Fixed

• PHP 8.1 deprecation while searching for composer binary. Pull request #434.
  Thanks to @StudioMaX.
• PHP 8.1 error with return type of php_user_filter::filter function.

2.0.11 (Rick Sanchez)

2023-01-11

Fixed

• PHP 8.1 deprecation while searching for composer binary. Pull request #434.
  Thanks to @StudioMaX.
• PHP 8.1 error with return type of php_user_filter::filter function.

2.1.2 (Mr. Meeseeks)

2022-09-01

Fixed

• Build logger expression. Pull requests #431. Thanks to @StudioMaX.
• Type of GET param commitId in WebhookController. Issue #432.
• Webhook response type. Issue #432.
• Secrets security: denied to using secrets in notify plugins content.

2.1.1 (Mr. Meeseeks)

2022-08-30

Fixed

• php-censor/common package version.
• Logging with secret variables (Now secrets hides from log).
• Secrets validation.

2.1.0 (Mr. Meeseeks)

2022-08-18

Added

• Secrets storage with UI and secret variables in build interpolation (you can use it like %SECRET:secret_name%. See documentation). Issue #14.
• Optional logging into database webhook requests payloads (option php-censor.webhook.log_requests). Issue #384.
• Steps inside stages (test, deploy etc.) which allow to have several same plugins into one stage. Issue #91. Pull request #417. Thanks to @KieranFYI. Usage example:

  setup: # <--- stage
    setup_env: # <--- step 1
      plugin: shell # <--- step 1 plugin name
      commands:
        - "php -r \"copy('.env.ci', '.env');\""
        - "php artisan key:generate"
        - "chmod -R 777 storage bootstrap/cache"
    migrate: # <--- step 2
      plugin: shell # <--- step 2 same plugin name
      commands:
        - "php artisan migrate"

• GET-parameter environment for Git webhook. Issue #407.
• Cloning/coping projects ability.
• [PHP Unit] Coverage trand for builds in the timeline on dashboard.

Changed

• Massive refactoring: added types, dependency injection, new tests, documentation, fixed code style etc. Issue #413. Pull requests #412, #424 and #425. Thanks to @KieranFYI and @Ooypunk.
• Integrated symfony/http-foundation library as a new HTTP part of project.
• Integrate some features from php-censor/common library.
• Improved UI: fixed colors and ratio for Chart.js charts, added ability to disable AJAX UI reloading (option php-censor.realtime_ui), improved error trends view. Pull request #426. Thanks to @KieranFYI.
• Improved Ukrainian localization. Pull request #419. Thanks to @oshka.

Fixed

• Install command return code.
• [PHPUnit] Xdebug settings for coverage option. Pull request #427. Thanks to @KieranFYI.

2.0.10 (Rick Sanchez)

2022-06-26

Fixed

• Updated dependencies. Fixed:

  • guzzlehttp/guzzle (6.5.7) | CVE-2022-31090: CURLOPT_HTTPAUTH option not cleared on change of origin | GHSA-25mq-v84q-4j7r

  • guzzlehttp/guzzle (6.5.7) | CVE-2022-31091: Change in port should be considered a change in origin GHSA-q559-8m2m-g699